nf_tables security

CVE-2026-31665 is a newly published Linux kernel vulnerability in netfilter, the packet-filtering framework that underpins nftables, conntrack, NAT, and many Linux firewall deployments. The bug is a use-after-free in the nftables connection-tracking timeout object destruction path, where the...

This latest Linux kernel CVE is a reminder that the most dangerous bugs are not always the loudest ones. CVE-2026-23272 affects netfilter’s nf_tables subsystem, where a subtle accounting and lifetime bug could let a set element be published and then removed without waiting for an RCU grace...